python3-commons 0.22.6__py3-none-any.whl → 0.22.8__py3-none-any.whl

python3_commons/auth.py

@@ -1,6 +1,7 @@
+import asyncio
 import logging
-import threading
-from collections.abc import Mapping, Sequence
+from collections.abc import Sequence
+from time import monotonic
 from typing import Any, Self, TypeVar
 
 from pydantic import HttpUrl
@@ -18,9 +19,8 @@ except ImportError as e:
 import msgspec
 
 logger = logging.getLogger(__name__)
-_OIDC_CONFIG_LOCK = threading.Lock()
-_OIDC_JWKS_LOCK = threading.Lock()
-_OIDC_SESSION_LOCK = threading.Lock()
+
+DEFAULT_JWKS_CACHE_TTL = 300.0
 
 
 class TokenData(msgspec.Struct):
@@ -81,6 +81,7 @@ class OIDCClient:
         timeout: float = 10.0,
         verify_cert: bool = True,
         connection_limit: int = 100,
+        jwks_cache_ttl: float = DEFAULT_JWKS_CACHE_TTL,
         authority_internal_host: HttpUrl | None = None,
         audit_name: str | None = None,
     ) -> None:
@@ -97,17 +98,22 @@ class OIDCClient:
         self._timeout = timeout
         self._verify_cert = verify_cert
 
-        self._config: Mapping[str, Any] | None = None
-        self._jwks: Mapping[str, Any] | None = None
+        self._session_lock = asyncio.Lock()
+        self._config: dict[str, Any] | None = None
+        self._config_lock = asyncio.Lock()
+        self._jwks: dict[str, Any] | None = None
+        self._jwks_lock = asyncio.Lock()
+        self._jwks_cache_ttl = jwks_cache_ttl
+        self._jwks_fetched_at: float | None = None
         self._audit_name: str | None = audit_name
 
-    def _get_session(self) -> aiohttp.ClientSession:
-        if self._session:
-            return self._session
+    async def _get_session(self) -> aiohttp.ClientSession:
+        if (session := self._session) and not session.closed:
+            return session
 
-        with _OIDC_SESSION_LOCK:
-            if self._session:
-                return self._session
+        async with self._session_lock:
+            if (session := self._session) and not session.closed:
+                return session
 
             connector = aiohttp.TCPConnector(verify_ssl=self._verify_cert, limit=self._connection_limit)
             timeout = aiohttp.ClientTimeout(total=self._timeout)
@@ -117,7 +123,7 @@ class OIDCClient:
             return session
 
     async def __aenter__(self) -> Self:
-        self._get_session()
+        await self._get_session()
 
         return self
 
@@ -130,27 +136,27 @@ class OIDCClient:
         Fetch the OpenID configuration (including JWKS URI) from OIDC authority.
         """
         async with api_client.request(
-            self._get_session(),
+            await self._get_session(),
             str(self._authority_url),
             '/.well-known/openid-configuration',
             audit_name=self._audit_name,
         ) as response:
             return await response.json()
 
-    async def get_config(self) -> Mapping[str, Any]:
-        if self._config:
-            return self._config
+    async def get_config(self) -> dict[str, Any]:
+        if config := self._config:
+            return config
 
-        with _OIDC_CONFIG_LOCK:
-            if self._config:
-                return self._config
+        async with self._config_lock:
+            if config := self._config:
+                return config
 
             config = await self._fetch_config()
             self._config = config
 
             return config
 
-    async def _fetch_jwks(self, jwks_uri: str) -> dict:
+    async def _fetch_jwks(self, jwks_uri: str) -> dict[str, Any]:
         """
         Fetch the JSON Web Key Set (JWKS) for validating the token's signature.
         """
@@ -160,21 +166,35 @@ class OIDCClient:
             jwks_uri = str(replace_origin(HttpUrl(jwks_uri), authority_internal_host))
             logger.debug('Modified jwks_uri: %s', jwks_uri)
 
-        async with api_client.request(self._get_session(), jwks_uri, '', audit_name=self._audit_name) as response:
+        async with api_client.request(await self._get_session(), jwks_uri, '', audit_name=self._audit_name) as response:
             return await response.json()
 
-    async def get_jwks(self) -> Mapping[str, Any]:
-        if self._jwks:
-            return self._jwks
+    def _is_fresh_jwks(self) -> bool:
+        fetched_at = self._jwks_fetched_at
+
+        if self._jwks is None or fetched_at is None:
+            return False
+
+        return (monotonic() - fetched_at) < self._jwks_cache_ttl
+
+    async def get_jwks(self, *, force_refresh: bool = False) -> dict[str, Any]:
+        if not force_refresh and (jwks := self._jwks) and self._is_fresh_jwks():
+            return jwks
+
+        fetched_at = self._jwks_fetched_at
+
+        async with self._jwks_lock:
+            if (jwks := self._jwks) and self._jwks_fetched_at != fetched_at:
+                return jwks
 
-        with _OIDC_JWKS_LOCK:
-            if self._jwks:
-                return self._jwks
+            if not force_refresh and jwks and self._is_fresh_jwks():
+                return jwks
 
             oidc_config = await self.get_config()
 
             jwks = await self._fetch_jwks(oidc_config['jwks_uri'])
             self._jwks = jwks
+            self._jwks_fetched_at = monotonic()
 
             return jwks
 
@@ -200,7 +220,7 @@ class OIDCClient:
 
         try:
             async with api_client.request(
-                self._get_session(),
+                await self._get_session(),
                 openid_config['token_endpoint'],
                 '',
                 method='post',

python3_commons/db/__init__.py

@@ -185,7 +185,7 @@ class AsyncSessionManager:
                     try:
                         yield session
                     except Exception:
-                        logger.exception('Error occured while db session %r was open; rolling back', name)
+                        logger.exception('Error occurred while db session %r was open; rolling back', name)
                         await session.rollback()
 
                         raise

{python3_commons-0.22.6.dist-info → python3_commons-0.22.8.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python3-commons
-Version: 0.22.6
+Version: 0.22.8
 Summary: Re-usable Python3 code
 Author-email: Oleg Korsak <kamikaze.is.waiting.you@gmail.com>
 License-Expression: GPL-3.0

{python3_commons-0.22.6.dist-info → python3_commons-0.22.8.dist-info}/RECORD

@@ -2,7 +2,7 @@ python3_commons/__init__.py,sha256=0KgaYU46H_IMKn-BuasoRN3C4Hi45KlkHHoPbU9cwiA,1
 python3_commons/api_client.py,sha256=SThSzLhZJxVsKP8n1xDMCczA7SBFbxGFgrhKy9k-9_g,5532
 python3_commons/async_functools.py,sha256=A2HvwFzZHxOWTp4IQM5UiBY2yg1S_0U1CWra5BWK0gk,9101
 python3_commons/audit.py,sha256=uGoCwenDJ0Gdwbr_VNOZm5scT8luxW1weprJbbMoHo0,2608
-python3_commons/auth.py,sha256=veZBrCT5xn5IRi2vP_LJikkv4oWvq-9ALypxKpPQGlo,7401
+python3_commons/auth.py,sha256=s928lYwpyX03BDTo1R6LpOgHiUSrjVrd1OVgTjvIiQU,8279
 python3_commons/cache.py,sha256=lowiXJqFgFy1Yg86wi9IhuoNqIUGP6nc5eNibmf0dfY,8018
 python3_commons/conf.py,sha256=1HYtNkNBQc5IIABzhH3kz7GnLeF7rj5aNcOoW8xbEa4,3101
 python3_commons/exceptions.py,sha256=EGjHZVBnsM6CeBfPMqhL0IPMKjDJ_2-Z-aSPXwq91LE,36
@@ -12,7 +12,7 @@ python3_commons/helpers.py,sha256=WTPu_jIOGYtxt1GYnH6sBMNDHry99AKv6ZaggGW2l1A,49
 python3_commons/object_storage.py,sha256=2l8v1mDB5WWN6jhxH2t5xmHBXaVPRJl0z44wExmlO80,7175
 python3_commons/permissions.py,sha256=gaMKSWg0MgPQTdP1voll4ItXcblXku9BlD0Lq3Xv64U,1724
 python3_commons/soap_client.py,sha256=w2lOyhhtkhwiNnHjvir8DfjGBO51XVg5rlDHyuudU2A,7169
-python3_commons/db/__init__.py,sha256=OvRLAKPvOzEId_M6ZAd1-KqGJJXxsDKjD6xUiRG6ilU,10187
+python3_commons/db/__init__.py,sha256=GP_9GXZUUgNvehFUCsXTIWThIMFW60Hwve7sve2oPgM,10188
 python3_commons/db/helpers.py,sha256=xRpWs4aVkBge6HCLjb6OLSnWc1nlV6rKGyaVhZ_x12w,2001
 python3_commons/db/models/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 python3_commons/db/models/auth.py,sha256=t6z_0c7l_1eB-CCdnPSV9OzJ_ymgkwD1cLpecNhQgoA,773
@@ -27,11 +27,11 @@ python3_commons/serializers/common.py,sha256=VkA7C6wODvHk0QBXVX_x2JieDstihx3U__U
 python3_commons/serializers/json.py,sha256=UPkC3ps13x2C_NxwVV-K7Ewp4VjkVHSSUkJVw5k7Wiw,712
 python3_commons/serializers/msgpack.py,sha256=zESFBX34GsZ8rDu6Zk5V6CLT6P0mPilU0r04Ka6TblI,1474
 python3_commons/serializers/msgspec.py,sha256=upy5CBmK66-8hYnK5bAM_sZvZY5CAqZmzCw9GIF346I,2988
-python3_commons-0.22.6.dist-info/licenses/AUTHORS.rst,sha256=3R9JnfjfjH5RoPWOeqKFJgxVShSSfzQPIrEr1nxIo9Q,90
-python3_commons-0.22.6.dist-info/licenses/LICENSE,sha256=xxILuojHm4fKQOrMHPSslbyy6WuKAN2RiG74HbrYfzM,34575
-python3_commons-0.22.6.dist-info/METADATA,sha256=bkTFbeGhsCPx_RGutoUS8bG-bQIn7Vx2BEUO2lIom3A,9472
-python3_commons-0.22.6.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
-python3_commons-0.22.6.dist-info/scm_file_list.json,sha256=Hjo_NQrKMIL3RWUjLVGGDP57Rok5PvQpVvbIVYHC2Nw,2518
-python3_commons-0.22.6.dist-info/scm_version.json,sha256=bcBml9-5V4SzNVw8Ro8CgsqejWvP-uNAqCzpJKsPFKQ,161
-python3_commons-0.22.6.dist-info/top_level.txt,sha256=lJI6sCBf68eUHzupCnn2dzG10lH3jJKTWM_hrN1cQ7M,16
-python3_commons-0.22.6.dist-info/RECORD,,
+python3_commons-0.22.8.dist-info/licenses/AUTHORS.rst,sha256=3R9JnfjfjH5RoPWOeqKFJgxVShSSfzQPIrEr1nxIo9Q,90
+python3_commons-0.22.8.dist-info/licenses/LICENSE,sha256=xxILuojHm4fKQOrMHPSslbyy6WuKAN2RiG74HbrYfzM,34575
+python3_commons-0.22.8.dist-info/METADATA,sha256=B3tGLZdnB93pCTxE36f7DhGJTsj2FrXEp3HyTE-PuFY,9472
+python3_commons-0.22.8.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
+python3_commons-0.22.8.dist-info/scm_file_list.json,sha256=_VHernCbTfExHtROxsobMxaHoIS1TJJ6S-8WTB3Aqvs,2549
+python3_commons-0.22.8.dist-info/scm_version.json,sha256=ftAm38mZuMBNfuYAg6OlyS5O00-fUbhn1VRa7r9eL3Y,161
+python3_commons-0.22.8.dist-info/top_level.txt,sha256=lJI6sCBf68eUHzupCnn2dzG10lH3jJKTWM_hrN1cQ7M,16
+python3_commons-0.22.8.dist-info/RECORD,,

{python3_commons-0.22.6.dist-info → python3_commons-0.22.8.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: setuptools (82.0.1)
+Generator: setuptools (83.0.0)
 Root-Is-Purelib: true
 Tag: py3-none-any
 

{python3_commons-0.22.6.dist-info → python3_commons-0.22.8.dist-info}/scm_file_list.json

@@ -1,75 +1,76 @@
 {
   "files": [
+    ".gitignore",
+    ".python-version",
+    "README.md",
+    "AUTHORS.rst",
+    "CHANGELOG.rst",
+    "pyproject.toml",
+    ".env_template",
     ".coveragerc",
     ".pre-commit-config.yaml",
-    "README.md",
     "uv.lock",
-    ".python-version",
     "LICENSE",
-    "pyproject.toml",
-    "CHANGELOG.rst",
-    ".env_template",
     "README.rst",
-    ".gitignore",
-    "AUTHORS.rst",
-    ".devcontainer/Dockerfile",
-    ".devcontainer/docker-compose.yml",
-    ".devcontainer/devcontainer.json",
-    "docs/Makefile",
-    "docs/license.rst",
-    "docs/authors.rst",
-    "docs/index.rst",
-    "docs/changelog.rst",
-    "docs/conf.py",
-    "docs/_static/.gitignore",
-    "src/python3_commons/helpers.py",
+    "src/python3_commons/conf.py",
     "src/python3_commons/soap_client.py",
-    "src/python3_commons/api_client.py",
-    "src/python3_commons/__init__.py",
-    "src/python3_commons/exceptions.py",
-    "src/python3_commons/object_storage.py",
+    "src/python3_commons/async_functools.py",
     "src/python3_commons/permissions.py",
-    "src/python3_commons/auth.py",
-    "src/python3_commons/audit.py",
-    "src/python3_commons/cache.py",
     "src/python3_commons/fs.py",
-    "src/python3_commons/conf.py",
-    "src/python3_commons/async_functools.py",
+    "src/python3_commons/api_client.py",
+    "src/python3_commons/audit.py",
+    "src/python3_commons/object_storage.py",
+    "src/python3_commons/exceptions.py",
+    "src/python3_commons/helpers.py",
     "src/python3_commons/generators.py",
+    "src/python3_commons/cache.py",
+    "src/python3_commons/auth.py",
+    "src/python3_commons/__init__.py",
     "src/python3_commons/db/helpers.py",
     "src/python3_commons/db/__init__.py",
+    "src/python3_commons/db/models/common.py",
     "src/python3_commons/db/models/rbac.py",
-    "src/python3_commons/db/models/__init__.py",
-    "src/python3_commons/db/models/users.py",
     "src/python3_commons/db/models/auth.py",
-    "src/python3_commons/db/models/common.py",
-    "src/python3_commons/log/__init__.py",
+    "src/python3_commons/db/models/users.py",
+    "src/python3_commons/db/models/__init__.py",
     "src/python3_commons/log/filters.py",
     "src/python3_commons/log/formatters.py",
-    "src/python3_commons/serializers/__init__.py",
-    "src/python3_commons/serializers/msgpack.py",
-    "src/python3_commons/serializers/json.py",
+    "src/python3_commons/log/__init__.py",
     "src/python3_commons/serializers/msgspec.py",
+    "src/python3_commons/serializers/json.py",
     "src/python3_commons/serializers/common.py",
+    "src/python3_commons/serializers/msgpack.py",
+    "src/python3_commons/serializers/__init__.py",
+    ".devcontainer/docker-compose.yml",
+    ".devcontainer/Dockerfile",
+    ".devcontainer/devcontainer.json",
+    ".github/workflows/checks.yml",
+    ".github/workflows/release-on-tag-push.yml",
+    ".github/workflows/python-publish.yaml",
     "tests/__init__.py",
-    "tests/integration/__init__.py",
-    "tests/integration/test_auth.py",
     "tests/integration/conftest.py",
     "tests/integration/test_osc.py",
     "tests/integration/test_cache.py",
-    "tests/unit/__init__.py",
-    "tests/unit/test_helpers.py",
+    "tests/integration/test_auth.py",
+    "tests/integration/__init__.py",
     "tests/unit/test_async_functools.py",
-    "tests/unit/test_msgspec.py",
     "tests/unit/conftest.py",
+    "tests/unit/test_msgspec.py",
     "tests/unit/test_audit.py",
+    "tests/unit/test_auth.py",
     "tests/unit/test_msgpack.py",
-    "tests/unit/db/__init__.py",
+    "tests/unit/test_helpers.py",
+    "tests/unit/__init__.py",
     "tests/unit/db/test_async_session_manager.py",
-    "tests/unit/log/__init__.py",
+    "tests/unit/db/__init__.py",
     "tests/unit/log/test_formatters.py",
-    ".github/workflows/release-on-tag-push.yml",
-    ".github/workflows/python-publish.yaml",
-    ".github/workflows/checks.yml"
+    "tests/unit/log/__init__.py",
+    "docs/conf.py",
+    "docs/Makefile",
+    "docs/index.rst",
+    "docs/authors.rst",
+    "docs/changelog.rst",
+    "docs/license.rst",
+    "docs/_static/.gitignore"
   ]
 }

python3_commons-0.22.8.dist-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "0.22.8",
+  "distance": 0,
+  "node": "g4f7323e76dc3e62de5b746137a7bd21019225e5b",
+  "dirty": false,
+  "branch": "HEAD",
+  "node_date": "2026-07-15"
+}

python3_commons-0.22.6.dist-info/scm_version.json

@@ -1,8 +0,0 @@
-{
-  "tag": "0.22.6",
-  "distance": 0,
-  "node": "gd66dd259ee583bc3a586ae4be41f9f159169f450",
-  "dirty": false,
-  "branch": "HEAD",
-  "node_date": "2026-06-26"
-}